Yes. Every user is required to enter an individual username and password. Also, the website can be run under the extra security of an SSL certificate (same thing banks use).